Data sharing is one of the key aspects of building a comprehensive cybersecurity concept within the T-SHARK programme. Shared cyber incident-related data, extracted using different technological tools; structured contextual information from different sources makes it possible to connect separate events, better understand targets and build situation awareness in the whole ecosystem.
Such integration and partial automation provide new ways of data sharing and the value of such a solution is piloted in the T-SHARK programme to be demonstrated at the final stages of the SPARTA project.
The solution addresses one of the fundamental challenges of the EU cybersecurity ecosystem, having a diverse multi-stakeholders community (differ with mandates, functional scope, the geography of operations, size, area of expertise) it is highly difficult to address complex international incidents in a timely, well-coordinated and efficient manner. SPARTA Cybersecurity Incidents and Investigation Data Sharing infrastructure provide one of the cornerstone components. It enables a trusted way to exchange different elements in a controlled way including:
- raw data;
- information on cybersecurity incidents;
- investigative processes outputs;
- ML and AI algorithms;
- analysis products;
- supplementary data and relationship between different entities.
Having this information shared and made available among EU MS cybersecurity actors in a controlled way enables collaborative cross-border investigations and analysis of complex and high-risk cybersecurity threats. By exploiting and developing further it can become a significant component of future European Cybersecurity Network and a Competence Centre collaborative infrastructure.
More information: https://sparta.eu/news/2021-06-24-sparta-data-sharing-infrastructure.html